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REMARKS 

In a Final Office Action dated December 7, 2010 ("Office Action"), the Examiner rejecied 
claims 21-23, 26-27, 29, 32-33, 36-39, and 41 under 35 U.S.C. §1 03(a) as being unpatentable 
over U.S. Patent No. 5,859,618 to Sudia {"Sudia") in view of U.S. Patent No. 5,544,322 to 
Cheng et ai. ("Chengf); rejected ciaims 24-25 under 35 U.S.C. §1 03(a) as being unpatentable 
over Sudia in view of Cheng in further view of U.S. Patent No. 5,956,408 to Arnold ("Arnold"); 
rejected claim 28 under 35 U.S.C, §1 03(a) as being unpatentable over Sudia in view of Cheng 
in further view of U.S. Patent No. 5,537,818 to Soulton et ai. ("Boutton"); rejected claim 30 under 
35 U.S.C. §1 03(a) as being unpatentable over Sudia in view of Cheng in further view of U.S. 
Patent No. 5,877,955 to Doggett et ai. ("Daggett); rejected claim 31 under 35 U.S.C. §1 03(a) as 
being unpatentable over Sudia in view of Cheng in further view of Doggett and U.S. Patent No. 
5,724,424 to Gifford {"Giffonf); and rejected ciaims 34-35 under 35 U.S.C. §1 03(a) as being 
unpatentable over Sudia in view of Cheng in further view of U.S. Patent No. 5,978,587 to 
Rebane et ai. ("Rebane"), 

By this Amendment, Applicant has amended claims 21 and 41. These amendments add 
no new matter and are fully supported by the specification. Applicant respectfully traverses the 
aforementioned rejections and request reconsideration based on the following remarks. 
Further, Applicant does not necessarily agree with or acquiesce in the Examiner's 
characterization of the claims or the appiied references, even if those characterizations are not 
addressed neresn. 

Applicant respectfully traverses the rejection of claims 21-39 and 41 under 35 U.S.C. 
§1 03(a) because a prima facie case of obviousness has not been established with respect to 
these claims, as is discussed in detail below. 
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Claims 21-23, 26-27, 29, 32-33, 38-39, and. 41 

Claims 21-23, 26-27, 29, 32-33, 38-39, and 41 stand rejected under 35 U.S.C. §1 03(a) 

as being unpatentable over Sudia in view of Cheng. Amended claim 21 recites, inter alia, a 

method for providing access to an online service including: 

"...collecting, by [a] first electronic appliance, audit record 
information relating to the user's use of [an] online service," 

Applicant respectfully submits that Sudia and Cheng, whether viewed separately or in 
combination, fail to disclose or suggest at least these claimed features. 

Sudia generally discloses methods of using "digital signatures and certificates for digital 
signatures in a commercial cryptographic system for enforcing security policies and 
authorization requirements in a manner that reduces risks to users." Sudia at Col. 1: II. 11-15. 
Particularly, Sudia discloses methods that utilize "public key certificates" created by a trusted 
issuer and "attribute certificates ... created on presentation of ... proper credentials by [a] user," 
in a system for enforcing electronic security policies. See e.g., id. at Col. 3: II. 42-57, and Col. 4: 
II. 18-20. Nowhere, however, in the passages cited by the Examiner or elsewhere, does Sudia 
disclose, or even suggest, a method for providing access to an online service that includes, inter 
aiia, "collecting, by [a] first electronic appliance, audit record information relating to the user's 
use of [an] online service," as recited in claim 21. Rather, Sudia is limited to a "signature 
verification model" where no collection relating to a user's use of an online service is performed. 

In the Office Action, the Examiner asserts that Sudia's disclosure of "transaction text 
1202" corresponds to "information relating to the user's use of [an] online service." Office Action 
at page 4. Applicant respectfully submits, however, that this characterization is inconsistent with 
the disclosure of Sudia. For example, Sudia discloses that its "transaction text 1202 H is included 
as part of a "confirmation message consisting of the original transaction 1201 (the transaction 
text 1202 and the sending user's signature}" which is sent by a recipient to a "user's sponsor 
1215, as specified 1204 in the sender's authorization certificate 1202" if the recipient verifies a 
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"sendees signature 1203" and a "sponsor's signature 1205" on the "authorization certificate 

1202." Sudia at Col. 13: Si, 7-12. That is, Sudia's "transaction text 1202" is a passive 

confirmation sent by a recipient confirming that signatures associated with a transaction have 

been verified. Thus, as discussed above, Sudia is limited to a "signature verification model" 

where no collection relating to a user's use of an online service is performed. Accordingly, 

Suida fails to disclose or suggest a method that includes "collecting, by [a] first electronic 

appliance, audit record information relating to [a] user's use of [an] online service," as recited in 

claim 21. 

Cheng fails to cure at feast the aforementioned deficiencies of Sudia. Cheng discloses a 
"system and method for defining a platform-independent framework for a trusted third-party 
network authentication protocol that permits a ciient requesting the services of a target server to 
derive a valid authentication path that complies with [an] authentication policy of the target 
service, and if necessary, [a] poiicy specified by the ciient." Cheng at Col. 3: II. 13-19. 
Nowhere, however, does Cheng disclose, or even suggest, a method for providing access to an 
online service that includes "collecting, by [a] first electronic appliance, audit record information 
relating to the user's use of [an] online service," as recited in claim 21 . Therefore, Cheng fails to 
cure the deficiencies of Sudia, 

For at least the above reasons, Sudia and Cheng, whether viewed separately or in 
combination, fail to disclose or suggest each and every feature recited in claim 21 . Therefore, 
Applicant submits that Sudia and Cheng do not render ciaim 21 obvious. Claims 22-23, 26-27, 
29, 32-33, 36-39, and 41 depend from ciaim 21 and are therefore allowable for at least the 
same reasons as claim 21. Accordingly, Applicant respectfully submits that claims 21-23, 26» 
27, 29, 32-33, 38-39, and 41 are allowable and request reconsideration and withdrawal of the 
rejection of claims 21-23, 26-27, 29, 32-33, 38-39, and 41 under 35 U.S.C. §103. 



-12- 
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Ciaims24~25 

Claims 24-25 stand rejected under 35 U.S.C. §1 03(a) as being unpatentable over Sudia 
in view of Cheng in further view of Arnold Claims 24-25 depend from ciaim 21 and therefore 
incorporate all of the elements recited in claim 21, As discussed above, Sudia and Cheng fail to 
disclose, or even suggest a method for providing access to an online service that includes 
"collecting, by [a] first electronic appliance, audit record information relating to the user's use of 
[an] online service," as recited in claim 21 . Applicant respectfully submits that Arnold fails to 
cure at least the aforementioned deficiencies of Sudia and Cheng. 

Arnoid generally discloses an "apparatus and method for secure distribution of software, 
software updates, and configuration data." Arnold at Col. 1: II. 11-13. More specifically, Arnold 
discloses an apparatus that utilizes "cryptography ... to protect software or data updates sent to 
computer products or peripherals using non-secure distribution channels." Id. at Col. 5: II. 36- 
38. Nowhere, however, does Arnold disclose, or even suggest, a method for providing access 
to an online service that includes, inter alia, "collecting, by [a] first electronic appliance, 
information relating to [a] user's use of [an] online service," as recited in claim 21 . Accordingly, 
Arnoid fails to cure the deficiencies of Sudia and Chang, 

For at least the above reasons, Sudia, Cheng, and Arnold, whether viewed separately or 
in any combination, fail to disclose or suggest each and every feature required in claims 24-25, 
and therefore do not render these claims obvious. Accordingly, Applicant respectfully submits 
that claims 24-25 are allowable and request reconsideration and withdrawal of the rejection of 
these claims under 35 U.S.C. §103. 

GMniM 

Claim 28 stands rejected under 35 U.S.C. §1 03{a) as being unpatentable over Sudia in 
view of Cheng in further view of Boutton. Claim 28 depends from claim 21 and therefore 
incorporates all of the elements recited in claim 21. As discussed above, Sudia and Cheng fail 
to disclose, or even suggest, a method for providing access to an online service that includes 
-13- 
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"collecting, by [a] first electronic appliance, audit record information relating to the user's use of 

[an] oniine service," as recited in claim 21 Applicant respectfully submits that Bouiton fails to 

cure at least the aforementioned deficiencies of Sudia and Cheng. 

Bouiton generally discloses methods and apparatuses relating to obtaining self-reported 
user feedback. See e.g., Bouiton at Col. 3: II. 58-57. More particularly, Bouiton discloses use of 
a "feedback viewing interface ... [that] receives feedback data from one or more users and 
presents the feedback data to a reviewer." Id. at Col. 3: II. 59-62. The feedback viewing 
interface includes, for example, feedback dialog and feedback message boxes which are 
populated by a user to provide self-reported feedback. Id. at Col. 4: II. 20-23. Nowhere, 
however, does Bouiton disclose or suggest a method for providing access to an online service 
that includes, inter alia, "collecting, by [a] first electronic appliance, information relating to [a] 
user's use of [an] online service," as recited in claim 21 . Accordingly, Bouiton fails to cure the 
deficiencies of Sudia and Cheng. 

For at least the above reasons, Sudia, Cheng, and Bouiton, whether viewed separately 
or in any combination, fail to disclose or suggest each and every feature required in claim 28, 
and therefore do not render claim 28 obvious. Accordingly, Applicant respectfully submits that 
ciaim d,o is aisowaoie ana request reconsideration and wstnorawai ot the rejection ot tnese 
claims under 35 U.S.C. §103. 

Claim 30 

Claim 30 stands rejected under 35 U.S.C. §1 03(a) as being unpatentable over Sudia in 
view of Cheng in further view of DoggetL Claim 30 depends from claim 21 and therefore 
incorporates all of the elements recited in claim 21. As discussed above, Sudia and Cheng fail 
to disclose, or even suggest, a method for providing access to an online service that includes 
"collecting, by [a] first electronic appliance, audit record information relating to the user's use of 
[an] online service," as recited in claim 21. Applicant respectfully submits that Doggeft fails to 
cure at least the aforementioned deficiencies of Sudia and Cheng. 

-14- 
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Doggett generally discloses electronic instruments for effectuating the secure transfer of 
electronic funds. See e.g., Daggett at Col. 1: II. 4-5. More particularly, Daggett discloses a 
"computer-based method in which an electronic instrument [that includes an electronic signature 
of a payer] is created for effectuating a transfer of funds from an account of the payer in a fund- 
holding institution to a payee." Id. at Col 3: II. 2-8. Nowhere, however, does Doggett disclose or 
suggest a method for providing access to an online service that includes "collecting, by [a] first 
electronic appliance, audit record Information relating to the user's use of [an] online service," as 
recited in claim 21. Accordingly, DoggeM fails to cure the deficiencies of Sudia and Cheng. 

For at least the above reasons, Sudia, Cheng, and Daggett, whether viewed separately 
or in any combination, fail to disclose or suggest each and every feature required in claim 30, 
and therefore do not render claim 30 obvious. Accordingly, Applicant respectfully submits that 
claim 30 is allowable and request reconsideration and withdrawal of the rejection of these 
claims under 35 U.S.C.§103. 

Claim 31 

Claim 31 stands rejected under 35 U.S.C. §1 03(a) as being unpatentable over Sudia in 
view of Cheng in further view of Doggett and Gifford. Claim 31 depends from claim 21 and 
therefore incorporates all of the elements recited in claim 21. As discussed above, Sudia, 
Cheng, and Doggett all fail to disclose, or even suggest, a method for providing access to an 
online service that includes "collecting, by [a] first electronic appliance, audit record information 
relating to the user's use of [an] online service," as recited in claim 21 . Applicant respectfully 
submits that Gifford fails to cure at least the aforementioned deficiencies of Sudia, Cheng, and 
Daggett. 

Gifford generally discloses a "network sales system for enabling users to purchase 
products using a plurality of buyer computers that communicate over a network with a plurality 
of merchant computers.' 5 Gifford at Col. 3: II. 14-17. Nowhere, however, does G/'rToro 1 disclose, 
or even suggest, a method for providing access to an online service that includes "collecting, by 
-15- 
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[a] first electronic appliance, audit record information relating to the user's use of [an] online 

service/' as recited in claim 21. Accordingly, Gifford fails to cure the deficiencies of Sudia, 

Cheng, and Daggett. 

For at ieast the above reasons, Sudia, Chang, Daggett, and Gifford, whether viewed 
separateiy or in any combination, fail to disclose or suggest each and every feature required In 
claim 31, and therefore do not render claim 31 obvious. Accordingly, Applicant respectfully 
submits that claim 31 is allowable and request reconsideration and withdrawal of the rejection of 
these claims under 35 U.S.C. §103. 

Claims 34-35 

Claims 34-35 stand under 35 U.S.C. §1 03(a) as being unpatentable over Sudia in view 
of Cheng in further view of Rebane. Claims 34-35 depend from claim 21 and therefore 
incorporates all of the elements recited in claim 21 . As discussed above, Sudia and Cheng fail 
to disclose, or even suggest, a method for providing access to an online service that includes 
"collecting, by [a] first electronic appliance, audit record information relating to the user's use of 
[an] online service," as recited in ciaim 21. Applicant respectfully submits that Rebane fails to 
cure at least the aforementioned deficiencies of Sudia and Cheng, 

Rebane generally discloses a "system and method to efficiently deliver multimedia 
interactive and linear programming on a large-scale network." Rebane at Abstract. Nowhere, 
however, does Rebane disclose or suggest a method for providing access to an online service 
that includes "collecting, by [a] first electronic appliance, audit record information relating to the 
user's use of [an] online service," as recited in ciaim 21. Accordingly, Rebane fails to cure the 
deficiencies of Sudia and Cheng. 

For at least the above reasons, Sudia, Cheng, and Rebane, whether viewed separately 
or in any combination, fail to disclose or suggest each and every feature required in claims 34- 
35, and therefore do not render claims 34-35 obvious. Accordingly, Applicant respectfully 
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submits that claims 34-35 are allowable and request reconsideration and withdrawal of the 
rejection of these claims under 35 U.S.C. §103. 



In view of the foregoing amendments and remarks, Applicant respectfully requests 
reconsideration and reexamination of this application and the timely allowance of the pending 
claims. 

Please grant any extensions of time required to enter this response and charge any 
additional required fees to our deposit account 08-0918. 



.Qg/iglusjQn 



Respectfully submitted s 



FiNNEGAN, HENDERSON, FARABGW, 
GARRETT & DUMMER, LLP, 



Dated: June 7, 2010 




Reg. No. 45,681 
617-452-1600 
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